RSS feed
  • Bot-like scanning/indexing from Lockheed Martin

    Posted on August 16th, 2010 qbit 1 comment

    Sometimes I look thru the blog stats to see which hosts are visiting.  I’ve run inot a lot of .mil domains but this is the first time I’ve noticed Lockheed Martin, the biggest military contractor in the US.

    These entries are from today. Looks like a custom blog/CMS-oriented scan using URL variables like /?p=1234 to index the site pages and comment feeds.

    There’s no reason a simple search spider should be scanning a site using random url variables.  This is a hostile scan that targets specific sites. This bot did not follow links to get here, nor is it following the links on my site to index it, which would be normal search indexing behavior.

    They’re indexing my content for profiling, not because they hope to provide relevant search results to users trying to do research or read news. I have no idea how often this bot has been scanning the blog.  I’ll have to do some log analysis.

    Bot-like scanning of random urls is going to get you banned.  If a human inside Lockheed Martin wants to legitimately read my blog, then fine. You might learn something.  But this is wasting my resources and you’re probing the site in a way that it’s not intended to be used.


    Client Data:

    • IP: 192.31.106.34
    • Hostname: proxy1a.external.lmco.com
    • User Agent: Mozilla/4.0 (compatible;)
    • Referrer:
    • Browser: Netscape 4
    • End timestamp: 2010-08-16 11:00:33

    192.31.106.34 2010-08-16 11:00:33

    Referrer: None
    Hostname: proxy1a.external.lmco.com [go ahead and copy paste lmco.com into your browser, if you like. Goes to Lockheed Martin (military contractor)]
    User Agent: Mozilla/4.0 (compatible;)
    OS: Unknown
    Reported Browser: Netscape 4

    whois 192.31.106.34?

    [Querying whois.arin.net]

    NetRange:       192.31.106.0 – 192.31.106.255
    CIDR:           192.31.106.0/24
    OriginAS:
    NetName:        LM-192-31-106
    NetHandle:      NET-192-31-106-0-1
    Parent:         NET-192-0-0-0-0
    NetType:        Direct Allocation
    NameServer:     NS2.LMCO.COM
    NameServer:     NS3.LMCO.COM
    NameServer:     NS1.LMCO.COM

    RegDate:        1997-06-17
    Updated:        2001-09-26
    Ref:            http://whois.arin.net/rest/net/NET-192-31-106-0-1

    OrgName:        Lockheed Martin Corporation
    OrgId:          LHMC
    Address:        1401 Del Norte
    City:           Denver
    StateProv:      CO
    PostalCode:     80221
    Country:        US
    RegDate:
    Updated:        2010-01-21
    Comment:        Unauthorized use of this system may be subject to disciplinary action, and
    Comment:        if such use is violative of state and federal laws it may be subject to
    Comment:        legal action as well. Reminder: Information transmitted to a foreign person
    Comment:        on this network may be subject to US Export Control laws. Contact your
    Comment:        Export Coordinator for assistance.
    Ref:            http://whois.arin.net/rest/org/LHMC

    OrgTechHandle: LMN-ORG-ARIN
    OrgTechName:   Lockheed Martin Corporation
    OrgTechPhone:  +1-303-430-2064
    OrgTechEmail:  lm-nic@lmco.com
    OrgTechRef:    http://whois.arin.net/rest/poc/LMN-ORG-ARIN

    Related: Federal Bureau of Investigation Awards Lockheed Martin Biometric Card Scanning Service Contract

    “We’re proud to continue our decade-long partnership with the FBI on the Card Scanning Service program,” Read more

    Share:
    • Reddit
    • Twitter
    • StumbleUpon
    • MySpace
    • Facebook
    • LinkedIn
    • Digg
    • Google Bookmarks
    • Slashdot
    • del.icio.us
    • Technorati
    • Live
    • NewsVine
    • Yahoo! Buzz

    Related posts:

     

    One Response to “Bot-like scanning/indexing from Lockheed Martin”

    1. Yep, looks like a bot to me.

      Either way Google will scan this site too and you can use Google to find what you need without even coming to this page.

      I like how you call them out though, LOL!

    Leave a Reply

    Spam protection by WP Captcha-Free